$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4aa8fb3d-37f6-3894-b8fd-24c19f9d1f2b.roa File: 4aa8fb3d-37f6-3894-b8fd-24c19f9d1f2b.roa (raw, json) Hash identifier: uXPWwU/sek3ll5Bf2cJbmSx2QYLMjW/q32vaI4TqdKs= Subject key identifier: B0:F9:EA:93:A0:32:7B:13:85:1B:91:8C:E5:65:F6:12:9A:87:C4:2D Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EE4234F26A0C17D71C511DEC0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4aa8fb3d-37f6-3894-b8fd-24c19f9d1f2b.roa Signing time: Wed 19 Aug 2026 18:03:58 +0000 ROA not before: Wed 19 Aug 2026 18:03:58 +0000 ROA not after: Tue 19 Mar 2030 04:00:00 +0000 asID: 8069 IP address blocks: 20.47.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:4f:26:a0:c1:7d:71:c5:11:de:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 19 18:03:58 2026 GMT Not After : Mar 19 04:00:00 2030 GMT Subject: CN=ab11a892-bf21-43d8-ba7e-3676ad9e8025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:71:68:c3:42:79:59:db:ba:5d:88:45:13:5f: 93:21:85:97:18:90:4e:0f:91:4a:ca:dc:6b:ef:f1: 38:d2:e3:92:81:25:83:14:0a:b9:db:6e:4f:14:fd: 4b:fb:19:d1:f6:f6:36:e1:f1:1b:c1:6a:49:14:4a: 7e:ac:bd:9b:79:38:83:39:20:28:69:f3:b6:38:12: e6:92:22:95:a9:b3:04:22:88:7b:b2:f8:6f:11:51: c6:87:ea:c8:9f:bd:66:0c:a7:11:37:6c:1d:f4:bf: 11:ef:e1:71:e1:c1:4f:e2:21:38:ac:11:68:e1:4a: 77:86:22:c9:ee:e2:87:2a:b1:15:4a:82:42:42:04: a9:90:34:87:b6:e3:d5:c9:9e:10:4b:7d:34:e8:70: bc:a2:9d:89:2e:7f:09:7b:cd:f6:c2:71:c0:7e:f4: 7c:b2:1b:56:82:f2:61:ad:62:eb:e5:8d:42:74:4d: 63:47:8d:b1:a2:8d:c9:5a:25:4b:01:71:e8:60:b3: 69:e2:77:e0:9a:66:91:d2:51:3d:3d:c9:5a:c2:f3: 41:8f:75:15:c6:73:fe:8f:39:18:62:7b:14:51:a1: 9a:46:39:68:0e:c8:0a:4f:60:46:b2:7f:b1:ac:25: ca:6d:6f:ec:3d:56:10:80:a7:83:14:a9:89:d4:a0: 50:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F9:EA:93:A0:32:7B:13:85:1B:91:8C:E5:65:F6:12:9A:87:C4:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/4aa8fb3d-37f6-3894-b8fd-24c19f9d1f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.47.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:a0:d0:7e:a1:cf:56:b6:6b:51:6c:8a:c8:13:a2:98:94:89: 2c:51:97:0f:82:79:e9:97:4c:38:6f:f1:2e:40:39:54:55:1d: 21:18:0d:6d:83:ba:d6:a5:10:ba:c0:05:8c:28:24:50:e2:c8: fe:4b:28:79:90:4c:85:10:3c:9e:d8:4b:e8:62:ef:f4:8f:4a: 8b:78:af:9c:7d:3c:2e:05:14:6b:67:79:50:42:d7:4a:d6:d3: 10:47:14:4a:ec:a1:ee:01:9e:5b:b5:a1:ac:22:b2:24:ea:7d: 1d:d2:36:f0:64:4a:4a:3f:b2:b7:5c:cd:03:11:7e:d0:19:d5: bc:9a:a5:99:0d:79:11:99:7f:94:1d:fa:4b:43:80:bb:ce:a0: f5:35:09:06:76:61:fb:ee:1b:0a:95:0f:ab:77:b5:55:07:8f: ca:7f:be:b1:8d:d0:88:9c:60:92:9c:98:d3:a3:30:22:d8:2f: eb:b0:38:b3:32:b8:c7:97:8e:58:3c:2b:88:3b:77:eb:89:c3: ad:ef:10:ca:a2:ea:74:e6:99:1d:0b:f3:23:3e:32:33:c5:06: 0c:c4:75:c0:7d:b1:e4:b9:40:31:d8:1a:dc:70:05:fb:4e:86: 54:3c:00:7d:3e:d5:f6:81:2a:7c:39:9f:9a:73:17:81:c5:d0: f5:8e:58:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI08moMF9ccUR3sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgxOTE4MDM1OFoXDTMwMDMxOTA0MDAwMFowLzEtMCsGA1UEAxMk YWIxMWE4OTItYmYyMS00M2Q4LWJhN2UtMzY3NmFkOWU4MDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XFow0J5Wdu6XYhFE1+TIYWXGJBOD5FKytxr 7/E40uOSgSWDFAq5225PFP1L+xnR9vY24fEbwWpJFEp+rL2beTiDOSAoafO2OBLm kiKVqbMEIoh7svhvEVHGh+rIn71mDKcRN2wd9L8R7+Fx4cFP4iE4rBFo4Up3hiLJ 7uKHKrEVSoJCQgSpkDSHtuPVyZ4QS3006HC8op2JLn8Je832wnHAfvR8shtWgvJh rWLr5Y1CdE1jR42xoo3JWiVLAXHoYLNp4nfgmmaR0lE9PclawvNBj3UVxnP+jzkY YnsUUaGaRjloDsgKT2BGsn+xrCXKbW/sPVYQgKeDFKmJ1KBQywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD56pOgMnsThRuRjOVl9hKah8QtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvNGFhOGZiM2QtMzdmNi0z ODk0LWI4ZmQtMjRjMTlmOWQxZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFC9iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+g0H6hz1a2a1FsisgTopiUiSxRlw+CeemXTDhv8S5AOVRVHSEYDW2D utalELrABYwoJFDiyP5LKHmQTIUQPJ7YS+hi7/SPSot4r5x9PC4FFGtneVBC10rW 0xBHFErsoe4Bnlu1oawisiTqfR3SNvBkSko/srdczQMRftAZ1byapZkNeRGZf5Qd +ktDgLvOoPU1CQZ2YfvuGwqVD6t3tVUHj8p/vrGN0IicYJKcmNOjMCLYL+uwOLMy uMeXjlg8K4g7d+uJw63vEMqi6nTmmR0L8yM+MjPFBgzEdcB9seS5QDHYGtxwBftO hlQ8AH0+1faBKnw5n5pzF4HF0PWOWNw= -----END CERTIFICATE-----Generated at Sat Sep 5 06:03:26 2026 by rpki-client